Unscored CVE-2012-4442 EUVD-2012-4375GHSA-g9q3-fr3w-j4gq

Monkey HTTP Daemon 0.9.3 retains the supplementary group IDs of the root account during operations with a non-root effective UID, which mig…

Published Oct 5, 2012 · Updated Sep 17, 2024 · Assigned by redhat

Description

Monkey HTTP Daemon 0.9.3 retains the supplementary group IDs of the root account during operations with a non-root effective UID, which might allow local users to bypass intended file-read restrictions by leveraging a race condition in a file-permission check.

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=688879
[oss-security] 20120920 Re: CVE-request: monkey fails to drop supplemental groups when lowering privileges mailing-list
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=688007